Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Advertisements

Rorschach112

Posted 10 August 2008 - 03:36 PM

Rorschach112

Ralphie

Retired Staff

47,710 posts

Open notepad, click Format, uncheck wordwrap

Before we begin, you should save these instructions in Notepad to your desktop, or print them, for easy reference. Much of our fix will be done in Safe mode, and you will be unable to access this thread at that time. If you have questions at any point, or are unsure of the instructions, feel free to post here and ask for clarification before proceeding.

Return to OTMoveIt2, right click in the "Paste List of Files/Folders to Move" window (under the light Yellow bar) and choose Paste.

Click the red Moveit! button.

A log of files and folders moved will be created in the c:\_OTMoveIt\MovedFiles folder in the form of Date and Time (mmddyyyy_hhmmss.log). Please open this log in Notepad and post its contents in your next reply.

Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.

Please visit this web page for instructions for downloading and running ComboFix

Once you install the Recovery Console, when you reboot your computer, you'll see the option for the Recovery Console now as well. Don't select Recovery Console as we don't need it. By default, your main OS is selected there. The screen stays for 2 seconds and then it proceeds to load Windows. That is normal.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.

OTMoveIt2 by OldTimer - Version 1.0.4.3 log created on 08112008_212950

Files moved on Reboot...
File C:\DOCUME~1\Jeremy\LOCALS~1\Temp\qacjyslc.dat not found!
File C:\DOCUME~1\Jeremy\LOCALS~1\Temp\hsperfdata_Jeremy\3244 not found!
File move failed. C:\WINDOWS\temp\gis7966feb7\32x32_ale.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\32x32_upd.gif scheduled to be moved on reboot.
C:\WINDOWS\temp\gis7966feb7\ci.dll unregistered successfully.
File move failed. C:\WINDOWS\temp\gis7966feb7\ci.dll scheduled to be moved on reboot.
DllUnregisterServer procedure not found in C:\WINDOWS\temp\gis7966feb7\cires_en.dll
C:\WINDOWS\temp\gis7966feb7\cires_en.dll NOT unregistered.
File move failed. C:\WINDOWS\temp\gis7966feb7\cires_en.dll scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\desktop.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\earth.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\empty.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\eula.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\GoogleUpdater.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\GoogleUpdaterAdminPrefs.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\GoogleUpdaterInstallMgr.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\GoogleUpdaterService.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\GoogleUpdaterSetup.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\gtfirstboot.exe scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\history.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\installer.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\lm.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\localized_eula.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\maintainer.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\minus.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\msg_error.gif scheduled to be moved on reboot.
DllUnregisterServer procedure not found in C:\WINDOWS\temp\gis7966feb7\npCIDetect11.dll
C:\WINDOWS\temp\gis7966feb7\npCIDetect11.dll NOT unregistered.
File move failed. C:\WINDOWS\temp\gis7966feb7\npCIDetect11.dll scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\pack.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\pack_large.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\pack_logo.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\picasa.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\plus.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\preferences.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\proxy.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\roundl_g.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\roundr_g.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\shield.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\sort_down.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\sort_up.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\talk.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\toolbar.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\ui.css scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\ui.js scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\ul.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\updates.htm scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\ur.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\waiting.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\gis7966feb7\waiting32.gif scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\IXP000.TMP\BACKUP~1.EXE scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NDP20-KB917283-X86\NDP20-KB917283-X86-msi.0.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NDP20-KB917283-X86\NDP20-KB917283-X86-wrapper.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NDP20-KB922770-X86\NDP20-KB922770-X86-msi.0.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NDP20-KB922770-X86\NDP20-KB922770-X86-wrapper.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NDP20-KB928365-v2-X86\NDP20-KB928365-v2-X86-msi.0.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\NDP20-KB928365-v2-X86\NDP20-KB928365-v2-X86-wrapper.log scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000006b\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000098\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000166\tmp00006479 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000268\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000290\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000002dc\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000032f\tmp00000b19 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000032f\tmp00002b9d scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000528\tmp000035c7 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000064f\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000655\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000091b\tmp000008eb scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000a8e\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000a9e\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000bed\tmp00004ef7 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000c2a\tmp000033b0 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000dd3\tmp000111c5 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000edd\tmp0000067c scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00000edd\tmp00004599 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001086\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000012a3\tmp00005e66 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000012a9\tmp00000b18 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000012f7\tmp00002ec7 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000012f7\tmp00002ecd scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000012f7\tmp00003d40 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000137e\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000014ba\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000014be\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000015c9\tmp0000aa84 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000016ec\tmp000003b0 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000018df\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000019a2\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001acf\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001aff\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001c0e\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001c6b\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001ead\tmp00007f56 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00001fb3\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002007\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002055\tmp00000ec9 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002160\tmp000074c2 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000021ec\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000227f\tmp0000a533 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000227f\tmp0000aa3d scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000227f\tmp0000ef8e scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000227f\tmp0000f28b scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000227f\tmp00016ac3 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000023c8\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000248a\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000024c5\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000275d\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002a7e\tmp000000c2 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002a7e\tmp000027ef scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002adf\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002b45\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002c7f\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002d17\tmp000050ab scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002ed4\tmp0000015e scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002ed4\tmp00001820 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002ee3\tmp00006ff2 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00002f55\tmp00002831 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003118\tmp00000bf0 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000031d3\tmp000003d3 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000031d3\tmp00002033 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000321e\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000336a\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000344e\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000352c\tmp00002c6a scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000379f\tmp00000875 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000038ad\tmp00000231 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000038ad\tmp00000d0a scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000038ae\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000038dc\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000039b8\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003a14\tmp00002086 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003a65\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003a74\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003bc0\tmp00005a6d scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003c1d\tmp00003e4c scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003dac\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003dc7\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003e56\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003f3c\tmp00002332 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003f3c\tmp00002333 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00003fb1\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000040fb\tmp00002b96 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000041b9\tmp00004e8d scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000420b\tmp000049bf scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000420b\tmp0001000f scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000042c7\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000452a\tmp00000b25 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000047a2\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000047e7\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004856\tmp00003740 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000048be\tmp0000608d scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000497c\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004c1b\tmp00000624 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004cf8\tmp00006388 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004d46\tmp00000093 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004d5e\tmp000061ba scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004e6e\tmp000013e1 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004e6e\tmp00001a98 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004e88\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004ee4\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004f26\tmp00000082 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004f26\tmp000066ba scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00004f31\tmp00000bf7 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005056\tmp00000046 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005056\tmp00007cec scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005175\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005279\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000052d5\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005439\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005450\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005651\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000056cc\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005731\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005833\tmp00007264 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000583f\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005878\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000059ab\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005afb\tmp00000c28 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005bae\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005bc6\tmp00008c99 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005c86\tmp0000676b scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005ca7\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005cc0\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005d23\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005db1\tmp0000467b scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005f23\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00005f9b\tmp00003568 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000607f\tmp00007866 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00006258\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000626f\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000066b7\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000688b\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000068ea\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00006bf6\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00006c1b\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007264\tmp00001a9f scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007264\tmp00003ced scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000072ec\tmp00000a39 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000753b\tmp00000d48 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp0000765a\tmp000078c8 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007690\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000076c1\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp000078cd\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007ab3\tmp00000929 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007ab3\tmp00000bb8 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007bfc\tmp0000095f scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007bfc\tmp00007a26 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007d68\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007e37\tmp000054a4 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007eb6\tmp00000000 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007f06\tmp0000e1d4 scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\tmp00007f06\tmp0000e2fb scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\ZNW2BA\manifest.ini scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\ZNW2BA\NDP20-KB928365-v2-X86.msp scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\ZNW41B\manifest.ini scheduled to be moved on reboot.
File move failed. C:\WINDOWS\temp\ZNW41B\NDP20-KB917283-X86.msp scheduled to be moved on reboot.

Check some important areas of your system and produce a report for an analyst to review.

Automatically run HijackThis. It will also install and place a shortcut to HijackThis on your desktop if you do not already have it installed. So if HijackThis is not installed and DSS prompts you to download it, please answer yes.

Note: You must be logged onto an account with administrator privileges when using Deckard's System Scanner.

Close all applications and windows.

Double-click on dss.exe to run it and follow the prompts.

If your anti-virus or firewall complains, please allow this script to run as it is not malicious.

When the scan is complete, two text files will open in Notepad:

main.txt <-- Will be maximized

extra.txt <-- Will be minimized

If not, they both can be found in the C:\Deckard\System Scanner folder.

Please copy (<Control>+C) and paste (<Control>+V) the contents of main.txt and extra.txt in your next reply.

Note: When running DSS, some firewalls may warn that DSS is trying to access the Internet; especially if you are asked to download the most current version of HijackThis. Please ensure that DSS is given permission to access the internet.Note: If you get a warning from your anti-virus while DSS is scanning, please allow DSS to continue as the scan is not harmful.

Once you install the Recovery Console, when you reboot your computer, you'll see the option for the Recovery Console now as well. Don't select Recovery Console as we don't need it. By default, your main OS is selected there. The screen stays for 2 seconds and then it proceeds to load Windows. That is normal.

Post the log from ComboFix when you've accomplished that, along with a new HijackThis log.